Software Cybersecurity Engineer

Abbott • San Diego, CA

1d • $100,000 - $200,000 • Onsite

About The Position

The Software Cybersecurity Engineer works on site in our San Diego, CA location, on our Infectious Diseases team. This role is on site daily. Our diagnostic solutions are used in hospitals, laboratories, and clinics around the globe. The crucial information derived from our tests, instruments, and informatics systems is often the first step in patient care decision-making for hundreds of health conditions from heart attacks to blood disorders to infectious diseases and cancers. We’re excited to share a highly rewarding and hands-on opportunity for a skilled and experienced Software Cybersecurity Engineer to join our growing team. As part of our team, you will be responsible for cloud cybersecurity, penetration testing, vulnerability assessments, and reporting findings to help detect bleeding-edge security vulnerabilities in Azure Cloud environment.

The person hired will help keep Abbott's cloud systems, software, and medical devices secure from hackers and cyber threats. They will also work with IT and software development teams to find security weaknesses, determine potential risks, and make sure problems are fixed before products are released. On a daily basis, they will review system security, perform testing to uncover vulnerabilities, help developers build safer software, and ensure products meet healthcare and regulatory security requirements. They will also create reports and documentation that prove products are secure and compliant. The role requires experience with cloud technologies, operating systems (Windows and Linux), web applications, coding/scripting, and cybersecurity tools. They will also use AI-powered tools and automation to speed up security reviews, analyze vulnerabilities, generate documentation, and improve overall cybersecurity processes. Additionally, they may occasionally speak with customers or leadership teams to explain security risks, requirements, and solutions.

Requirements

• Associate's degree and 7 years of relevant experience.
• Minimum 5 years (7+ preferred) in cybersecurity, product security, IT security, or related experience, with a strong preference for product security (consumer-facing applications and services) and hands-on engineering.
• Demonstrated hands-on experience conducting web, mobile, and cloud infrastructure security testing using DAST, SAST, SCA, SBOM generation tooling, and network- and agent-based vulnerability scanning tools.
• Holds or working toward one or more relevant certifications - e.g., CISSP, CISA, CISM, CCSP, or CEH (or equivalent).
• Advanced experience applying AI into everyday tasks, including utilizing AI Skills and Automations, AI agents, and MCP servers; ability to build and modify agents that produce or support cybersecurity deliverables.
• Familiarity with new and emerging AI tools/copilots and the judgment to adopt them securely and in line with policy.
• Understanding of ISO 27001 and NIST cybersecurity frameworks; experience with audit and certification processes.
• Strong analytical and critical-thinking skills, sound judgment, and the ability to work independently on complex tasks in an environment with changing priorities.
• Excellent documentation, oral, and written communication skills for interaction with all levels of management and staff, including the ability to communicate business risk as it relates to cybersecurity.
• Strong team player able to communicate effectively within cross-functional groups and perform peer reviews of work products and documents.

Nice To Haves

• Prior product-development cybersecurity role.
• Familiarity with diagnostic equipment, medical devices, or closely related products.

Responsibilities

• Designs, implements, and validates cybersecurity controls for cloud-based applications, software products, and connected medical devices.
• Identifies and assesses security risks, vulnerabilities, and emerging threats, driving remediation strategies that ensure products remain secure, compliant, and aligned with industry and regulatory cybersecurity requirements.
• Independently leads complex cybersecurity initiatives, delivering release-ready security artifacts, conducting technical security reviews with engineering teams, and translating vulnerability findings into actionable, business-focused risk insights for technical and leadership stakeholders.
• Leverages automation and AI-enabled tools to improve security assessment, risk analysis, and compliance outcomes.
• Advances the team's use of AI and agentic automation to accelerate and improve the quality of cybersecurity deliverables.
• Works closely with corporate/external penetration testing team to identify vulnerabilities and find mitigations and resolutions.
• Identifies and assesses vulnerabilities in systems and applications, utilizing manual and automated testing methods to find and exploit code flaws, misconfigurations, and insecure software.
• Keeps cybersecurity training and knowledge current by monitoring the latest security threats and vulnerabilities.
• Provides recommendations for remediation of identified vulnerabilities.
• Develops and delivers cybersecurity artifacts for product software releases, including SBOMs, vulnerability remediation evidence, threat models, and release security documentation; leads technical reviews with development teams on vulnerabilities, security controls, remediation progress, and residual risk.
• Designs and recommends systematic remediation strategies and preventive controls to reduce recurring vulnerabilities, including secure coding practices, dependency management, and configuration hardening across product and supporting applications.
• Occasionally joins senior leaders or stakeholders on client kick-off and discovery sessions to answer questions from prospects and clients.
• Provides information security expertise and assists in incorporating control measures into new and existing projects around medical device security.
• Assists with performing risk assessments of existing and new Abbott cloud systems and medical devices.
• Designs and develops security strategies for cloud-based applications including hardening, incident response, pen testing, and disaster recovery.
• Performs all procedures necessary to ensure the safety of information systems assets and to protect systems from intentional or inadvertent access or destruction.
• Applies in-depth knowledge of user authentication, certificate management, digital signatures, and cloud security architecture.
• Demonstrates commitment to the development, implementation and effectiveness of the Quality Management System per ISO, FDA, and other regulatory agencies.
• Uses knowledge of programming languages such as Python, JavaScript, React.
• Uses AI-assisted development tools (e.g., GitHub Copilot and other LLM-based code assistants) to write, review, and secure code more efficiently.
• Leans on knowledge of web application security, including experience with web application scanners and manual testing techniques.
• Applies familiarity with AI-powered cybersecurity tools (e.g., AI-assisted threat detection, vulnerability triage, and log analysis), validating results for accuracy and safety.
• Applies AI to cybersecurity deliverables to improve speed and quality - e.g., AI-assisted vulnerability triage and deduplication, SBOM and CVE analysis, drafting of security documentation and remediation evidence, and summarizing findings into risk insights.
• Maintains working familiarity with current and emerging AI tools and copilots, and evaluates them for safe, policy-compliant use in security workflows.
• Builds, configures, and modifies agentic AI applications (AI agents, Skills/Automations, and MCP servers) that automate cybersecurity deliverables such as scan-result analysis, evidence collection, dashboarding, and remediation tracking - with appropriate guardrails, human review, and data-handling controls.
• Promotes responsible and secure AI use, including awareness of AI/LLM-specific risks (e.g., prompt injection, data leakage, model/supply-chain risk) in both Abbott products and internal security tooling.

Benefits

• Career development with an international company where you can grow the career you dream of.
• Employees can qualify for free medical coverage in our Health Investment Plan (HIP) PPO medical plan in the next calendar year.
• An excellent retirement savings plan with a high employer contribution.
• Tuition reimbursement, the Freedom 2 Save student debt program, and FreeU education benefit - an affordable and convenient path to getting a bachelor’s degree.
• A company recognized as a great place to work in dozens of countries worldwide and named one of the most admired companies in the world by Fortune.
• A company that is recognized as one of the best big companies to work for as well as the best place to work for diversity, working mothers, female executives, and scientists.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree